Breaches of HIPAA-protected health data affecting 500+ people.

As required by section 13402(e)(4) of the HITECH Act, the Secretary [of the Department of Health and Human Services] must post a list of breaches of unsecured protected health information affecting 500 or more individuals.

Source(s)

Summary

## Glimpse
## Observations: 1,700
## Variables: 12
## $ Name.of.Covered.Entity                   <fctr> Brooke Army Medical ...
## $ State                                    <fctr> TX, MO, AK, DC, CA, ...
## $ Covered.Entity.Type                      <fctr> Healthcare Provider,...
## $ Individuals.Affected                     <dbl> 1000, 1000, 501, 3800...
## $ Year                                     <fctr> 2009, 2009, 2009, 20...
## $ Month                                    <fctr> 10, 10, 10, 11, 11, ...
## $ Day                                      <fctr> 21, 28, 30, 17, 20, ...
## $ Type.of.Breach                           <fctr> Theft, Theft, Theft,...
## $ Location.of.Breached.Information         <fctr> Paper/Films, Network...
## $ Business.Associate.Present               <fctr> No, No, No, No, No, ...
## $ Web.Description                          <fctr> A binder containing ...
## $ Individuals.Affected.Normalized.Outliers <dbl> 1000, 1000, 501, 3800...

## Summary
##                              Name.of.Covered.Entity     State    
##  Walgreen Co.                           :   7       CA     :200  
##  StayWell Health Management, LLC        :   6       TX     :140  
##  University of California, San Francisco:   5       FL     :114  
##  Clearpoint Design, Inc.                :   4       NY     :104  
##  Mount Sinai Medical Center             :   4       IL     : 93  
##  Oregon Health & Science University     :   4       PA     : 60  
##  (Other)                                :1670       (Other):989  
##                 Covered.Entity.Type Individuals.Affected      Year    
##  Business Associate       : 274     Min.   :       0     2014   :296  
##  Health Plan              : 207     1st Qu.:     970     2013   :274  
##  Healthcare Clearing House:   4     Median :    2266     2015   :269  
##  Healthcare Provider      :1173     Mean   :   99346     2016   :241  
##  Unknown                  :  42     3rd Qu.:    7428     2012   :208  
##                                     Max.   :78800000     2010   :198  
##                                                          (Other):214  
##      Month          Day                              Type.of.Breach
##  04     :181   15     :  75   Hacking/IT Incident           :236   
##  03     :162   23     :  68   Improper Disposal             : 60   
##  07     :156   10     :  66   Loss                          :143   
##  09     :148   07     :  64   Other                         : 91   
##  10     :144   09     :  63   Theft                         :748   
##  08     :142   12     :  62   Unauthorized Access/Disclosure:399   
##  (Other):767   (Other):1302   Unknown                       : 23   
##  Location.of.Breached.Information Business.Associate.Present
##  Paper/Films     :398             No :1393                  
##  Laptop          :317             Yes: 307                  
##  Other           :303                                       
##  Network Server  :230                                       
##  Desktop Computer:209                                       
##  Email           :145                                       
##  (Other)         : 98                                       
##  Individuals.Affected.Normalized.Outliers
##  Min.   :    0                           
##  1st Qu.:  862                           
##  Median : 1784                           
##  Mean   : 3337                           
##  3rd Qu.: 4258                           
##  Max.   :17100                           
##  NA's   :218

Individuals Affected

Individuals Affected - All
Min. 1st Qu. Median Mean 3rd Qu. Max.
0 970 2266 99346 7428 78800000
Individuals Affected - Normalized
Min. 1st Qu. Median Mean 3rd Qu. Max. NA's
0 862 1784 3337 4258 17100 218

Individuals Affected - Summary (Yearly)
Year: 2009 (N = 18) Year: 2010 (N = 198) Year: 2011 (N = 196) Year: 2012 (N = 208) Year: 2013 (N = 274) Year: 2014 (N = 296) Year: 2015 (N = 269) Year: 2016 (N = 241)
min 501 500 0 0 0 0 0 500
max 83,000 1,220,000 4,900,000 780,000 4,029,530 4,500,000 78,800,000 3,620,000
mean (sd) 7,487.39 (19,054.29) 27,950.89 (132,660.75) 67,093.36 (406,309.83) 13,500.20 (61,426.71) 25,365.39 (247,932.53) 43,033.69 (298,207.63) 421,067.56 (4,894,615.84) 59,357.00 (359,476.77)

Individuals Affected - Summary (Monthly)
Month: 01 (N = 126) Month: 02 (N = 126) Month: 03 (N = 162) Month: 04 (N = 181) Month: 05 (N = 140) Month: 06 (N = 126) Month: 07 (N = 156) Month: 08 (N = 142) Month: 09 (N = 148) Month: 10 (N = 144) Month: 11 (N = 131) Month: 12 (N = 118)
min 0 0 0 500 0 500 0 0 0 0 0 0
max 839,711 1,700,000 78,800,000 1,900,000 1,100,000 1,220,000 4,500,000 4,500,000 1e+07 1,055,489 4,900,000 160,000
mean (sd) 20,110.21 (86,009.88) 28,454.31 (160,687.52) 588,959.32 (6,245,705.65) 30,156.10 (157,759.11) 26,284.41 (110,875.05) 17,834.05 (109,407.32) 76,400.96 (485,287.89) 130,429.71 (654,867.10) 89,305.63 (836,809.40) 20,094.24 (109,303.72) 64,057.51 (444,504.27) 8,729.50 (19,149.34)

Central Limit Theorem Validation

Sample Size 10

## Confidence Level - Sample Size = 10
## 80% Conf Level (alpha = 0.20), CI = 2866.09 - 3811.18 
## 90% Conf Level (alpha = 0.10), CI = 2732.13 - 3945.14
## Mean =  3338.638  SD =  1166.02

Sample Size 100

## Confidence Level - Sample Size = 100
## 80% Conf Level (alpha = 0.20), CI = 3296.94 - 3388.59 
## 90% Conf Level (alpha = 0.10), CI = 3283.95 - 3401.58
## Mean =  3342.764  SD =  357.5562

Sample Size 1000

## Confidence Level - Sample Size = 1000
## 80% Conf Level (alpha = 0.20), CI = 3335.34 - 3344.82 
## 90% Conf Level (alpha = 0.10), CI = 3334.00 - 3346.17
## Mean =  3340.083  SD =  116.9811

Random Sampling

Breach Analysis